GHSA-w8h4-vw8f-rvvjMediumCVSS 5.3

Improper Control of Dynamically-Managed Code Resources in config-shield

Published
April 13, 2021
Last Modified
September 12, 2023

🔗 CVE IDs covered (1)

CVE-2021-26276 →

📋 Description

scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data.

🎯 Affected products1

  • npm/config-shield:< 0.2.3

🔗 References (4)